Privacy Policy

1. Who we are

Boundly is a boutique GTM recruitment service operated as a sole trader by Connor Robert Jones.

Data Controller: Connor Robert Jones, trading as Boundly
Contact: connor@boundly.io
Website: https://boundly.io

2. What personal data we collect

From clients and prospective clients

• Name, job title, company name and email address
• Information about your hiring requirements, role briefs and business context
• Communications via email, phone, LinkedIn or the website contact form

From candidates

• Name, email address, phone number and location
• CV, work history, skills, qualifications and career aspirations
• Interview notes and assessment information
• Information collected via LinkedIn Recruiter
• Notes and transcripts from AI-assisted interview tools (such as Metaview), where consent has been obtained

From website visitors

• Information submitted through the contact form (name, email, company, message)
• Anonymous usage data via Google Analytics (pages visited, session duration, device type)

3. How we use your data

Purpose	Lawful basis
Matching candidates to suitable roles and contacting them about opportunities	Legitimate interests
Providing recruitment services to clients	Contract / Legitimate interests
Responding to enquiries submitted via the contact form	Legitimate interests
Maintaining records of placements and recruitment activity	Legitimate interests / Legal obligation
Sending relevant recruitment updates or market insights by email (where opted in)	Consent
Improving the website through analytics	Consent (via cookie preferences)

4. Third-party tools and processors

We use the following third-party tools that may process personal data on our behalf:

Tool	Purpose	Data shared
LinkedIn Recruiter	Candidate sourcing and outreach	Candidate profile data
Metaview (and similar AI note-taking tools)	Interview note-taking and transcription	Interview audio/content — consent obtained prior to use
Google Analytics	Website usage analytics	Anonymised visitor data
Netlify (Netlify Forms)	Website hosting and contact form delivery	Form submission content (name, email, company, message)
Email marketing platform (future)	Recruitment newsletters/updates	Name and email — consent required

All third-party processors are required to handle your data in accordance with UK GDPR. We do not sell your personal data to any third party.

5. How long we keep your data

• Candidate CVs and personal data: 12 months from the date of last contact, after which data is securely deleted unless you ask us to retain it
• Client contact data: For the duration of the business relationship, plus 3 years
• Contact form submissions: 12 months
• Email correspondence: 3 years
• Analytics data: As per Google Analytics retention settings (default 26 months)

6. Your rights under UK GDPR

You have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your data where there is no compelling reason to retain it
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests (including direct marketing)
• Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, email connor@boundly.io. We will respond within 30 days.

7. Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. Data is stored within secure platforms and access is limited to Connor Robert Jones.

8. International transfers

Some third-party tools (including Google Analytics and LinkedIn) may transfer data outside the UK. Where this occurs, appropriate safeguards are in place in accordance with UK GDPR, including Standard Contractual Clauses or adequacy decisions.

9. Complaints

If you have concerns about how we handle your data, please contact us first at connor@boundly.io. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page will always reflect the most recent version. Significant changes will be communicated where appropriate.